Lucene search
+L

7361 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•3 views

CVE-2026-11789: Integer Underflow (Wrap or Wraparound)

A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when computing salt length from a crafted password hash shorter than 16 bytes, causing a buffer over-read that crashes the LDAP server during authentication...

6.5CVSS5.9AI score0.00282EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•34 views

Microsoft Office Excel 数字错误漏洞

Microsoft Excel is a spreadsheet software within the Office suite developed by the American company Microsoft. There is a code execution vulnerability in Microsoft Excel, and attackers can exploit this vulnerability to execute code locally...

7.8CVSS7.5AI score0.00466EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/09 12:00 a.m.•29 views

PT-2026-47932

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An integer underflow wrap or wraparound occurs in Microsoft Office Excel, which could allow an unauthorized attacker to execute code locally. Recommendations At the moment, the...

7.8CVSS6AI score0.00466EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

Microsoft Office Excel 缓冲区错误漏洞

Microsoft Excel is a spreadsheet software within the Office suite developed by the American company Microsoft. There is a code execution vulnerability in Microsoft Excel, and attackers can exploit this vulnerability to execute arbitrary code on the system...

7.8CVSS7.8AI score0.00466EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/06/09 12:00 a.m.•46 views

Security Updates for Microsoft Excel Products (June 2026)

The Microsoft Excel Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Integer underflow wrap or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally. CVE-2026-44817, CVE-2026-44818, CVE-2026-44820,...

8.2CVSS6.5AI score0.00759EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•4 views

CVE-2026-42980: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally...

7.8CVSS7.2AI score0.00333EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•3 views

CVE-2026-45463: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally...

8.4CVSS7.8AI score0.00364EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/06/09 12:00 a.m.•36 views

PT-2026-47956

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An integer underflow wrap or wraparound occurs in Microsoft Office Excel, which allows an unauthorized attacker to execute arbitrary code locally or remotely, potentially...

7.8CVSS6.2AI score0.00466EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/06/09 12:00 a.m.•25 views

RHEL 9 : krb5 (RHSA-2026:24686)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:24686 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending password...

7.5CVSS7AI score0.00783EPSS
SaveExploits1References4
Zero Day Initiative
Zero Day Initiative
•added 2026/06/09 12:00 a.m.•24 views

X.Org Server XkbSetCompatMap Integer Underflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

7.8CVSS7.4AI score0.00186EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/06/08 3:17 a.m.•142 views

frr: denial of service via crafted BGP UPDATE message

A flaw was found in FRRouting FRR. An unauthenticated remote attacker can exploit an integer underflow vulnerability by supplying a specially crafted BGP Border Gateway Protocol UPDATE message. This issue can lead to a Denial of Service DoS...

7.5CVSS5.9AI score0.00684EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/06/08 2:07 a.m.•19 views

xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling

A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of servi...

7.8CVSS7.3AI score0.00186EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/06/07 12:08 p.m.•33 views

CVE-2026-49494 Xcitium Client Security / Comodo Internet Security Remote Denial of Service

Xcitium Client Security XCS before 13.8.2.10019 and Comodo Internet Security CIS through 12.3.4.8162 fix expected by 2026 Q3 contain an integer underflow vulnerability in the firewall driver Inspect.sys that allows remote unauthenticated attackers to crash the system by sending a crafted IPv6...

8.7CVSS7.4AI score0.00793EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/06/07 12:08 p.m.•80 views

CVE-2026-49494 Xcitium Client Security / Comodo Internet Security Remote Denial of Service

Xcitium Client Security XCS before 13.8.2.10019 and Comodo Internet Security CIS through 12.3.4.8162 fix expected by 2026 Q3 contain an integer underflow vulnerability in the firewall driver Inspect.sys that allows remote unauthenticated attackers to crash the system by sending a crafted IPv6...

8.7CVSS0.00793EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/07 12:00 a.m.•10 views

CVE-2026-49494: Integer Underflow (Wrap or Wraparound)

Xcitium Client Security XCS before 13.8.2.10019 and Comodo Internet Security CIS through 12.3.4.8162 fix expected by 2026 Q3 contain an integer underflow vulnerability in the firewall driver Inspect.sys that allows remote unauthenticated attackers to crash the system by sending a crafted IPv6...

8.7CVSS7.5AI score0.00793EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/07 12:00 a.m.•35 views

Comodo Internet Security 数字错误漏洞

Comodo Internet Security is a set of computer security software developed by the American company Comodo, primarily aimed at internet security. Comodo Internet Security has a digital error vulnerability; this vulnerability stems from an integer underflow in the IPv6 packet resolver within the...

8.7CVSS5.8AI score0.00793EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/06/06 6:42 a.m.•33 views

CVE-2026-50593

Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range...

7.3CVSS5.8AI score0.00112EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/06/06 2:45 a.m.•23 views

SUSE CVE-2026-50593

Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range...

7.1CVSS5.8AI score0.00112EPSS
SaveExploits0References11
RedhatCVE
RedhatCVE
•added 2026/06/05 7:58 p.m.•32 views

CVE-2026-5589

An integer underflow in btmeshsolrecv in the Bluetooth Mesh solicitation handling subsys/bluetooth/mesh/solicitation.c leads to an out-of-bounds write. When CONFIGBTMESHODPRIVPROXYSRV is enabled, the function parses solicitation PDUs from raw BLE advertising payloads. The AD parsing loop reads an...

6.3CVSS6.3AI score0.00362EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/06/05 7:49 p.m.•26 views

CVE-2026-5778

Integer underflow in wolfSSL packet sniffer = 5.9.0 allows an attacker to cause a program crash in the AEAD decryption path by injecting a TLS record shorter than the explicit IV plus authentication tag into traffic inspected by sslDecodePacket. The underflow wraps a 16-bit length to a large valu...

6.5CVSS5.9AI score0.00372EPSS
SaveExploits0References1
Rows per page
Query Builder